---
page_title: "cloudflare_keyless_certificate Resource - Cloudflare"
subcategory: ""
description: |-
  Provides a resource, that manages Keyless certificates.
---

# cloudflare_keyless_certificate (Resource)

Provides a resource, that manages Keyless certificates.

## Example Usage

```terraform
resource "cloudflare_keyless_certificate" "example" {
  zone_id       = "0da42c8d2132a9ddaf714f9e7c920711"
  bundle_method = "ubiquitous"
  name          = "example.com Keyless SSL"
  host          = "example.com"
  port          = 24008
  enabled       = true
  certificate   = "-----INSERT CERTIFICATE-----"
}
```
<!-- schema generated by tfplugindocs -->
## Schema

### Required

- `certificate` (String) The zone's SSL certificate or SSL certificate and intermediate(s). **Modifying this attribute will force creation of a new resource.**
- `host` (String) The KeyLess SSL host.
- `zone_id` (String) The zone identifier to target for the resource.

### Optional

- `bundle_method` (String) A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: `ubiquitous`, `optimal`, `force`. Defaults to `ubiquitous`. **Modifying this attribute will force creation of a new resource.**
- `enabled` (Boolean) Whether the KeyLess SSL is on.
- `name` (String) The KeyLess SSL name.
- `port` (Number) The KeyLess SSL port used to communicate between Cloudflare and the client's KeyLess SSL server. Defaults to `24008`.

### Read-Only

- `id` (String) The ID of this resource.
- `status` (String) Status of the KeyLess SSL.

## Import

Import is supported using the following syntax:

```shell
$ terraform import cloudflare_keyless_certificate.example <zone_id>/<keyless_certificate_id>
```
